Skip to content
OpenAdvisories

Archive

25 March 2026

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.8
    CVE-2026-33917 Public exploit

    OpenEMR has SQL Injection in CAMOS Form

    OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 contais a SQL injection vulnerability in the ajax_save CAMOS form that can be exploited by authenticated attackers. The vulnerab…

  • High 7.2
    CVE-2026-33910 Public exploit

    OpenEMR has a SQL Injection Vulnerability in patient selection

    OpenEMR is a free and open source electronic health records and medical practice management application. Versions up to and including 8.0.0.2 contain a SQL injection vulnerability in the patient selection feature that can be exploited by authenticated attacke…

  • High 8.1
    CVE-2026-29187 Public exploit

    OpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.php

    OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a Blind SQL Injection vulnerability exists in the Patient Search functionality (/interface/new/new_search_popup.php). The vulner…

  • High 8.1
    CVE-2026-32488 Public exploit

    WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in wpeverest User Registration user-registration allows Privilege Escalation.This issue affects User Registration: from n/a through <= 4.4.9.

  • High 7.1
    CVE-2026-20687 Public exploit

    A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7…